This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa
File:                     3230302e31362e3131372e302f32342d3234203d3e203236363035.roa (raw, json)
Hash identifier:          KkEqu9GOrO+BZrVxz0Gb787H9TR2PTcqLFfxBsohw2c=
Subject key identifier:   33:26:3A:20:34:14:B6:57:DA:E6:AB:D7:CB:A4:35:A4:FC:FE:85:E9
Certificate issuer:       /CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
Certificate serial:       4A281573E621C4FA91F50F9B3B546716CB5E094C
Authority key identifier: B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa
Signing time:             Tue 06 Jan 2026 19:33:59 +0000
ROA not before:           Tue 06 Jan 2026 19:28:59 +0000
ROA not after:            Tue 05 Jan 2027 19:33:59 +0000
asID:                     26605
IP address blocks:        200.16.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 02:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:28:15:73:e6:21:c4:fa:91:f5:0f:9b:3b:54:67:16:cb:5e:09:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B396C17C90DFE052D24EB8A035A959AA99A930
        Validity
            Not Before: Jan  6 19:28:59 2026 GMT
            Not After : Jan  5 19:33:59 2027 GMT
        Subject: CN=33263A203414B657DAE6ABD7CBA435A4FCFE85E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:d9:0f:cf:f6:c2:ba:d5:5e:05:ae:27:72:
                    ac:37:cd:0b:31:05:a5:40:ca:e2:43:8e:b8:25:9b:
                    11:3a:ed:2e:6c:c6:60:e8:ec:6e:93:1f:b7:40:9e:
                    71:fd:5c:ac:59:50:dc:9e:e9:a7:6b:bb:47:21:54:
                    bd:db:50:17:dc:8c:99:72:ca:09:c4:79:6f:c4:01:
                    cf:58:ab:b9:37:3f:29:1f:f9:a5:0b:d4:13:e2:0e:
                    27:4c:c5:df:b4:ae:9d:3d:19:a7:44:e1:2c:1a:68:
                    51:38:4d:1e:a0:b1:00:a7:38:11:2a:15:fc:23:35:
                    47:af:34:0a:5f:e1:fb:a4:7d:77:c0:bc:f0:72:82:
                    17:fb:c2:e3:f0:fc:af:e0:76:ea:f6:00:00:b5:ec:
                    52:c4:5d:2b:d2:a6:8e:e2:b3:b1:30:ee:a0:40:06:
                    95:64:bf:60:95:ed:9c:8c:ae:6d:b5:47:75:93:fc:
                    51:a7:27:32:4b:ba:1d:85:e1:b5:aa:85:b8:9b:b4:
                    62:81:83:7a:21:b1:fe:3b:5e:37:7e:b2:43:5c:ef:
                    84:5b:c2:c1:13:f9:e0:36:55:2f:14:dc:4d:c0:34:
                    62:2f:71:3c:82:74:80:0f:34:82:ad:16:54:e2:5a:
                    2a:b3:78:f6:98:a7:bf:44:d7:ca:ad:ae:63:d5:47:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:26:3A:20:34:14:B6:57:DA:E6:AB:D7:CB:A4:35:A4:FC:FE:85:E9
            X509v3 Authority Key Identifier:
                keyid:B8:B3:96:C1:7C:90:DF:E0:52:D2:4E:B8:A0:35:A9:59:AA:99:A9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8B396C17C90DFE052D24EB8A035A959AA99A930.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F51E3DF853DE2B50D505C68B08498111250402B7D58CE7A9FE4CE9DC3EA22152/0/3230302e31362e3131372e302f32342d3234203d3e203236363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:09:df:51:05:25:07:de:c9:55:d9:d8:dc:ae:46:2c:8a:eb:
         eb:6c:1b:36:65:21:82:f6:a7:14:f9:0d:e3:0e:00:da:fc:c9:
         d7:74:b7:3b:c3:e9:1b:1f:09:96:df:98:1a:61:12:ee:5f:0e:
         56:77:31:b3:00:f9:06:08:d4:40:90:22:7a:0b:a8:52:f1:f9:
         8f:3d:b6:7c:d7:de:74:59:28:d3:cd:15:4e:ec:50:3b:e1:51:
         5c:70:e7:5e:1c:cb:47:88:c4:e4:2e:be:a4:9d:4d:9e:62:95:
         c7:fa:b3:ea:40:d0:9d:e7:c9:1e:8f:1a:84:df:11:bb:3b:2f:
         c4:b6:fa:d7:a8:2f:cd:0f:3a:f7:b6:cb:3f:f1:16:61:ee:47:
         6c:fc:68:cf:55:d8:a7:76:47:9f:f3:e4:17:7c:39:89:60:bb:
         f1:cb:73:3d:80:c1:bb:21:bf:ea:29:3a:e1:40:0d:33:cb:85:
         aa:ad:b9:1b:fc:f8:66:08:02:d1:cc:14:ab:a4:e4:5f:2e:85:
         09:64:46:f7:e1:28:48:91:84:d7:92:12:25:1b:82:3b:e2:2f:
         d7:bf:b5:4f:66:8d:36:15:ac:cc:de:b3:9b:a1:d6:74:c4:fa:
         d5:d4:84:86:5a:49:dd:12:ed:81:35:dd:e3:35:e8:c0:d1:d7:
         b3:e7:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:35 2026 by rpki-client